Malicious versions reported for this package
- MAL-2025-25805 — all versions · Aug 14, 2025
1 result · Feed
-
Critical 9.8
Malicious Package in maleficent
All versions of `maleficent` contain malicious code. The package is a demonstration of possible risks when installing npm packages. It gathers system information such as: environment variables, OS information, network interface, AWS credentials, npm credentia…